Live › vulnerability › CVE-2026-98926
Go to dashboardA Linux kernel fix in the AMD display driver removes use of a stream sink pointer during display power state changes, because that pointer can be null and was dereferenced without checks. The sources describe a robustness fix and do not state what an attacker gets from the unpatched code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the AMD display (amdgpu DRM) driver, which is used on AMD graphics hardware. The sources do not say which kernel versions were affected or whether the flaw is reachable by an unprivileged user.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
drm/amd/display: Remove sink usage from DPMS
[Why] stream->sink is optional and can be null, so should always be checked before dereference. Additionally, most of its usage in DPMS sequences is for stream->sink->link, which can be replaced with stream->link, as the two should always be the same.
[How]
This page as .md · .json · in your agent: get_signal("CVE-2026-98926")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.